Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47173b78-e3b2-3c1a-975a-e4299f961072.roa
File:                     47173b78-e3b2-3c1a-975a-e4299f961072.roa (raw, json)
Hash identifier:          w7X7h+Rf28X3PUeDAp1Sqe2KjjT3UFOhCiY1r598mTQ=
Subject key identifier:   D6:21:2E:13:60:7A:42:63:A6:CB:A1:10:99:D4:EF:5D:A5:23:F2:51
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584598FE01F71207AFC27E896D80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47173b78-e3b2-3c1a-975a-e4299f961072.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     852
IP address blocks:        185.201.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:01:f7:12:07:af:c2:7e:89:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=389a5b05-74b1-4098-bf68-3365d94728ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:a6:79:81:dc:fb:2e:8e:8a:50:21:25:ef:
                    e8:29:d0:c6:fe:12:6b:ee:dd:b4:c2:bb:59:e8:2d:
                    be:37:5f:77:79:3b:be:8b:2d:26:c8:27:4d:d6:56:
                    d1:4b:5c:30:97:02:d2:a7:7d:5b:7e:0c:b1:85:2e:
                    29:5c:af:99:08:c1:c6:ce:6b:c0:cd:36:53:bf:05:
                    52:69:52:92:9e:9b:ed:bd:e1:17:76:b0:c2:7d:0c:
                    4c:ab:e7:d9:0b:c2:94:75:d0:70:a0:1f:32:bd:9b:
                    11:53:1f:73:a4:8e:42:24:cb:66:aa:6e:35:55:8d:
                    90:98:bc:60:ab:a0:e5:0f:d4:13:f3:e9:25:b7:c5:
                    4d:d6:9a:28:95:c6:74:24:ad:05:8a:4a:10:e5:77:
                    93:60:be:76:eb:81:9a:3f:cf:46:b7:bb:57:c1:c0:
                    ab:a1:f8:9a:05:19:84:9e:db:e3:7e:11:dc:29:69:
                    86:24:f9:51:2d:9d:06:84:f5:8f:a6:5c:68:eb:4f:
                    d7:df:10:a9:b1:a7:18:58:51:28:10:27:c2:53:cc:
                    e0:e0:35:52:ba:a2:71:a4:32:47:d1:47:77:ef:2a:
                    60:52:a0:4d:f6:dc:cc:2d:9d:d9:c9:04:ba:43:c2:
                    d1:ae:1b:95:4d:41:00:ea:ef:41:40:5f:88:f0:75:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:21:2E:13:60:7A:42:63:A6:CB:A1:10:99:D4:EF:5D:A5:23:F2:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47173b78-e3b2-3c1a-975a-e4299f961072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:28:3f:af:e7:03:c7:74:39:0c:92:53:30:8c:de:bc:5e:c7:
         ab:93:ed:e7:bb:f4:94:90:98:d3:dc:4b:b7:8c:7f:32:2f:cc:
         b5:23:50:3a:0a:9e:ce:2d:00:50:e1:a9:8c:43:28:29:1d:8b:
         45:99:ba:a0:08:b4:09:3d:c9:eb:8f:23:5f:72:b6:81:70:55:
         1e:80:9f:f0:4a:57:17:4e:4c:90:3e:f6:b4:43:cf:94:5c:79:
         1f:3a:08:6b:11:ad:1e:f2:32:06:46:3f:1f:50:b2:9e:8a:8a:
         cb:b7:b6:1b:d6:98:e6:7d:db:91:94:af:2a:56:c9:2a:0f:00:
         7f:50:eb:21:79:2c:74:ff:a2:af:64:80:80:b6:4c:67:a3:58:
         2f:2f:29:0e:41:ce:95:d9:9e:11:77:ee:87:9e:29:da:ba:c3:
         21:83:c7:23:f5:0f:98:96:87:f7:3d:be:93:42:4f:6c:ad:e6:
         e4:74:1e:2a:83:c6:3b:4e:89:84:8a:f8:7d:73:eb:81:f0:35:
         e7:1b:e4:e2:e9:d2:37:c5:42:aa:2a:ac:6b:3d:0b:af:9b:92:
         69:d8:9f:f3:78:37:29:01:df:39:09:f3:7c:18:48:9b:4b:09:
         ea:ee:8e:7b:41:a9:b8:c4:fb:a5:74:1e:ad:1c:37:e1:28:cc:
         cb:7a:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:06:33 2024 by rpki-client on console-ams.rpki-client.org